Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c8cca27-0890-4b71-95ae-ee387cd5e753.roa
File: 5c8cca27-0890-4b71-95ae-ee387cd5e753.roa (raw, json)
Hash identifier: gy5XGPkx7Lyuhv4UCvxu8tV1GcYhnfhGclDhvF5/nqU=
Subject key identifier: D5:C0:1B:C1:9E:2B:88:EC:97:B0:4E:32:1D:BD:42:46:4C:56:C3:4E
Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Certificate serial: 0CEC0C2140877FF3407A79BC47073794DB611EB7
Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c8cca27-0890-4b71-95ae-ee387cd5e753.roa
Signing time: Sat 29 Jul 2023 00:00:00 +0000
ROA not before: Sat 29 Jul 2023 00:00:00 +0000
ROA not after: Sat 02 Sep 2023 23:59:59 +0000
asID: 400098
IP address blocks: 199.36.120.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:ec:0c:21:40:87:7f:f3:40:7a:79:bc:47:07:37:94:db:61:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d
Validity
Not Before: Jul 29 00:00:00 2023 GMT
Not After : Sep 2 23:59:59 2023 GMT
Subject: serialNumber=d79ef5934e4a2b1fe0f3327deaddb7e084698340d4de05db4502c0e9a77eec4e, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:be:cc:55:dd:3f:63:a1:4c:53:30:3e:62:57:
13:aa:4d:86:20:2b:52:ca:36:cb:0c:e6:42:2c:f2:
9e:b8:6b:09:c3:49:1c:4e:70:85:d7:dc:4b:cd:f8:
e5:e0:b0:ae:f7:0f:c2:6b:7e:08:bb:4d:af:d8:a3:
ab:88:ab:4d:84:a6:9f:40:5c:68:07:29:9a:68:12:
bc:99:b5:0d:b6:b0:0c:39:bc:3e:80:fb:51:da:e0:
61:f9:33:56:2f:9b:1c:42:1f:ac:a6:d6:28:2d:ab:
de:c2:bc:5a:8b:a2:fe:82:74:b8:f7:25:a3:d3:ba:
d9:62:d1:e9:c1:87:e8:79:fa:cc:db:2b:c1:d5:80:
c0:65:b8:fc:b8:03:3f:a9:6a:8a:a8:50:a5:43:c7:
83:b1:ec:cb:5b:f2:3d:9a:92:77:f3:89:2a:9c:7b:
ac:1a:a6:b1:c5:4d:0e:f6:b5:e4:84:f3:b8:c7:6a:
79:45:90:99:c8:17:a4:e8:8d:d1:1a:df:fc:4c:0e:
5b:b2:7c:6d:c6:96:6c:71:cd:fe:7a:f2:bb:7c:7c:
fb:e7:99:c2:77:b9:27:57:52:48:1e:2f:87:cb:f5:
71:61:68:ad:3c:de:9d:49:a5:9a:5d:bd:e2:0d:54:
7d:b4:c5:15:05:45:6a:e8:fb:5e:9a:12:29:a0:8e:
73:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:C0:1B:C1:9E:2B:88:EC:97:B0:4E:32:1D:BD:42:46:4C:56:C3:4E
X509v3 Authority Key Identifier:
keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/5c8cca27-0890-4b71-95ae-ee387cd5e753.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
199.36.120.0/24
Signature Algorithm: sha256WithRSAEncryption
97:2a:10:58:23:6d:a8:75:03:75:9d:99:d3:5d:ef:ed:08:0a:
c1:5c:ff:b8:a1:3d:10:f8:d0:30:46:ac:06:a5:ae:98:10:1e:
46:7b:af:10:e9:ee:0c:cd:19:af:34:6d:b1:56:20:8b:a0:dd:
05:d8:3a:83:8d:7c:60:5c:12:53:86:ca:65:fa:e6:81:78:af:
18:d6:43:89:0a:11:7b:6d:d0:04:4c:fc:aa:97:61:c8:55:b2:
8a:e7:5a:7a:30:9b:b6:66:f1:26:da:c7:af:61:41:94:d1:41:
8f:73:94:a0:88:b3:8b:20:40:09:04:00:3f:85:96:e5:be:47:
a3:a2:5e:74:8c:c9:b6:db:f0:42:aa:81:53:fd:9a:1a:1f:30:
f1:f4:19:84:f3:f1:84:f0:3e:77:4e:99:c3:a8:f5:b5:bc:cf:
69:51:05:23:63:85:a5:43:84:64:d4:c4:ba:ca:6f:0c:94:93:
55:51:07:b3:cd:5f:a4:88:be:c6:00:1a:bb:f2:fa:d3:f8:f8:
be:af:ba:df:4a:26:1e:32:61:ca:02:d6:4d:ed:27:d1:5d:cf:
7b:d2:20:8d:20:3f:b7:fe:ab:0f:38:46:88:20:09:9c:0a:26:
dd:15:29:34:43:09:cc:b5:13:9d:8a:12:5d:dd:6a:9f:f1:bc:
e9:44:a5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:47:47 2025 by rpki-client